[OpenAFS] Re: OpenAFS 1.7.26 windows and not changed AFS service principle - OK?

Lars Schimmer l.schimmer@cgv.tugraz.at
Sat, 27 Jul 2013 10:51:04 +0200


This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
------enig2VHTMFORNDEAUOVDFQIVK
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

On 2013-07-26 22:30, Andrew Deason wrote:
> On Fri, 26 Jul 2013 14:07:46 +0200
> Lars Schimmer <l.schimmer@cgv.tugraz.at> wrote:
>=20
>> Ok, now with access to such a machine:
>> krbtgt/CGV.TUGRAZ.AT@CGV.TUGRAZ.AT
>> Etype (skey, tkt): AES-256 CTS mode with 96-bit SHA-1 HMAC, AES-256 CT=
S
>> mode with 96-bit SHA-1 HMAC
>> afs/cgv.tugraz.at/CGV.TUGRAZ.AT
>> Etype /skey, tkt): DES cbc mode with CRC-32, AES-256 CTS mode with
>> 96-bit SHA-1 HMAC
>=20
> By any chance, do you happen to have the registry entry
>=20
> HKLM\SYSTEM\CurrentControlSet\services\kdc\KdcUseRequestedEtypesForTick=
ets
>=20
> set to 1? That seems like it may cause that behavior, from a quck test =
I
> just did.

Yes, I did set it.

Lets see what happens if I set it to 0.


MfG,
Lars Schimmer
--=20
-------------------------------------------------------------
TU Graz, Institut f=FCr ComputerGraphik & WissensVisualisierung
Tel: +43 316 873-5405       E-Mail: l.schimmer@cgv.tugraz.at
Fax: +43 316 873-5402       PGP-Key-ID: 0x4A9B1723




------enig2VHTMFORNDEAUOVDFQIVK
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlHzifwACgkQmWhuE0qbFyNS7gCfZEGdyO29HzP6MYaxcrwrQJYL
dI0AnivE2xMSvoscShCnCRuQv3nZQJOZ
=tRHt
-----END PGP SIGNATURE-----

------enig2VHTMFORNDEAUOVDFQIVK--